$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3a47c5aa-f2df-3a4c-9231-7596ffbd39d5.roa File: 3a47c5aa-f2df-3a4c-9231-7596ffbd39d5.roa (raw, json) Hash identifier: AvkbgcUwkhPdp5dKAA/4g2CVVrOFjYrhqpnKNNtDnfE= Subject key identifier: 3D:74:80:62:A4:00:0B:CD:70:28:04:72:3D:29:B4:0A:D6:91:6A:A1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B355703A8AAD8C46A9704E5C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3a47c5aa-f2df-3a4c-9231-7596ffbd39d5.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 36627 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:57:03:a8:aa:d8:c4:6a:97:04:e5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=9103e8e6-a698-4860-b0b1-475de977d820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:75:0b:bf:05:4a:81:a1:d8:60:78:4c:77:e2: 95:c0:0b:62:01:ed:60:cf:de:fe:59:59:22:f3:2d: d9:25:3d:b5:d2:49:4d:78:83:1e:19:8b:55:5d:90: a8:62:f2:50:48:20:db:dd:df:19:9f:bc:ab:9d:22: d7:d1:e7:79:a8:e2:9d:3b:45:dc:ab:6d:5d:39:aa: 50:62:6a:a8:b8:a7:c8:80:14:5b:e9:7f:b7:24:50: be:44:9c:5f:58:bc:71:0f:14:66:9d:7e:62:c6:7d: 0c:21:4b:8e:52:c8:b0:6c:6f:88:18:fa:84:9d:4b: c1:c9:a3:c3:33:a8:71:2d:37:a0:5f:f0:14:c5:11: f2:d3:7b:bf:2e:94:18:93:5f:83:c2:40:31:ff:6a: c0:1d:cc:b2:fc:07:a0:a7:21:58:eb:47:0d:54:08: a3:63:14:38:39:8e:41:a3:6f:3f:99:4b:6d:01:d8: 59:bd:9c:0c:56:f3:5c:0c:21:ef:ec:74:e2:94:df: 7f:95:b4:8a:31:4d:2a:14:de:58:ea:ca:d6:c9:81: 9b:8d:b6:5b:e8:ed:72:5d:2e:1e:73:f0:c7:ca:97: df:a7:eb:9e:79:0a:90:59:bc:fd:48:e5:9a:9f:de: a4:40:f1:6d:95:c9:a0:2d:08:ca:c9:b1:94:ed:2c: fe:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:74:80:62:A4:00:0B:CD:70:28:04:72:3D:29:B4:0A:D6:91:6A:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3a47c5aa-f2df-3a4c-9231-7596ffbd39d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:a4:0a:07:a1:c3:de:11:9a:30:85:0a:1c:da:66:0d:29:2a: c4:74:86:11:67:54:3f:45:5b:f6:7c:e0:31:c5:db:34:a2:6a: 12:ed:a8:e5:d5:d8:50:58:50:f8:02:e3:52:eb:30:9a:93:44: 73:7a:b8:8a:46:aa:9e:94:6e:a5:e7:a1:82:bd:57:85:5b:09: 48:08:e0:18:9d:a5:78:1d:23:fc:a9:75:0d:b2:a5:85:ee:37: 69:75:95:68:8e:38:c0:e3:8b:a7:96:38:ad:2e:0f:3a:55:38: ac:aa:fb:95:b2:e0:4f:39:cf:fd:2e:49:21:34:81:87:68:4c: 07:c7:6f:6d:13:bf:2e:90:db:fd:4c:1f:a4:b8:90:5e:c4:1a: 01:86:b7:61:d5:41:38:52:ee:4e:6e:30:61:29:0a:58:d0:f5: e9:71:98:6c:2c:5d:a0:c9:c6:bf:f4:84:d2:52:b1:bd:93:f9: 51:64:07:83:a9:fe:bf:5f:c5:21:19:fc:58:5c:df:88:28:40: f1:69:8a:a8:e7:8b:7b:0a:b4:ed:e7:41:d8:9e:7d:37:24:ae: 84:b9:2a:98:de:db:ac:69:ea:f6:a0:25:c5:7e:f4:7a:73:ee: 78:be:ac:bc:4f:43:3b:aa:aa:02:04:d0:3e:2d:84:ac:f0:20: b6:da:24:8b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEs1VwOoqtjEapcE5cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk OTEwM2U4ZTYtYTY5OC00ODYwLWIwYjEtNDc1ZGU5NzdkODIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7XULvwVKgaHYYHhMd+KVwAtiAe1gz97+WVki 8y3ZJT210klNeIMeGYtVXZCoYvJQSCDb3d8Zn7yrnSLX0ed5qOKdO0Xcq21dOapQ YmqouKfIgBRb6X+3JFC+RJxfWLxxDxRmnX5ixn0MIUuOUsiwbG+IGPqEnUvByaPD M6hxLTegX/AUxRHy03u/LpQYk1+DwkAx/2rAHcyy/AegpyFY60cNVAijYxQ4OY5B o28/mUttAdhZvZwMVvNcDCHv7HTilN9/lbSKMU0qFN5Y6srWyYGbjbZb6O1yXS4e c/DHypffp+ueeQqQWbz9SOWan96kQPFtlcmgLQjKybGU7Sz+FQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFD10gGKkAAvNcCgEcj0ptArWkWqhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2E0N2M1YWEtZjJkZi0z YTRjLTkyMzEtNzU5NmZmYmQzOWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA5pAoHocPeEZowhQoc2mYNKSrEdIYRZ1Q/RVv2 fOAxxds0omoS7ajl1dhQWFD4AuNS6zCak0RzeriKRqqelG6l56GCvVeFWwlICOAY naV4HSP8qXUNsqWF7jdpdZVojjjA44unljitLg86VTisqvuVsuBPOc/9LkkhNIGH aEwHx29tE78ukNv9TB+kuJBexBoBhrdh1UE4Uu5ObjBhKQpY0PXpcZhsLF2gyca/ 9ITSUrG9k/lRZAeDqf6/X8UhGfxYXN+IKEDxaYqo54t7CrTt50HYnn03JK6EuSqY 3tusaer2oCXFfvR6c+54vqy8T0M7qqoCBNA+LYSs8CC22iSL -----END CERTIFICATE-----Generated at Thu Oct 30 03:23:26 2025 by rpki-client